Temple Shalom Listed by dragonforce Ransomware Group

On December 13, 2025, Temple Shalom, a Reform Jewish synagogue serving roughly 400 families in the Washington, D.C. area, appeared on the leak site of the dragonforce ransomware group. Internal files were allegedly exfiltrated during a ransomware attack, and the synagogue’s private documents are now publicly listed for anyone to download.

Reported Details of the Incident

Public reporting indicates that Temple Shalom was listed on the dragonforce leak site with a post dated December 13, 2025. The exposed material consists of internal files taken during the ransomware operation. The exact number of affected individuals remains unknown, though the congregation includes approximately 400 families. No specific types of personal records such as Social Security numbers or financial details have been publicly detailed in available reporting, but the breach involves documents that could contain member information, donor records, or operational data.

The listing follows the group’s standard pattern of posting stolen data after an organization declines or fails to meet their ransom demand. Industry research from sources such as DoxxScan™ continuous monitoring indicates that religious and community organizations have increasingly appeared in ransomware incidents over the past two years.

Why This Matters for You and Your Family

When a community organization like a synagogue is breached, the people whose information lives in those files are ordinary families — parents, children, grandparents, and staff. Your address, phone number, email, children’s names, or donation history may now sit in a publicly downloadable archive. Once that data leaves a trusted institution, it never truly returns. It can be sold, traded, or used to build profiles that make your household an easier target for identity theft, phishing, or physical threats.

Credential leaks from such incidents often cascade into account takeovers elsewhere. A password reused from a synagogue portal can unlock email, banking, or your child’s gaming account. For families, one breach can quietly expose every member of the household.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at posting raw files. They create searchable archives that allow criminals to connect names, addresses, emails, and phone numbers across multiple breaches. This identity-chain mapping turns a single leak into a detailed profile that can lead to doxxing, targeted scams, or harassment. Children’s information included in family or youth program records is especially vulnerable because gaming usernames and school details can link back to home addresses.

Available reporting describes how these chains grow quickly. A seemingly harmless membership list combined with later breaches can reveal patterns that expose your full digital footprint within weeks.

Dragonforce’s Publicly Known Track Record

Public reporting attributes the dragonforce ransomware group with emerging in early 2024. The group has targeted hospitals, schools, local governments, and nonprofit organizations. Their typical playbook involves gaining initial access through phishing or exploited remote desktop services, exfiltrating data before encrypting systems, and then pressuring victims with both encryption and public data leaks. Extortion demands usually include a short deadline followed by incremental leaks if payment is not received. Dragonforce maintains an active leak site where they publish samples and full datasets of non-paying victims.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you ever used for Temple Shalom or related community portals anywhere it is reused, and switch to 2FA through an authenticator app instead of text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists manage takedown requests across data brokers and leak sites on your behalf while you focus on securing your own accounts.

The Temple Shalom breach is a reminder that community institutions hold information that directly affects your family’s safety. Taking concrete steps now limits how far this incident can reach. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to understand and close the gaps this claimed breach may have opened.